65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

技能实现与描述大体一致 (用于访问云效 Codeup)，但包清单/元数据未声明所需的访问令牌，并且运行说明鼓励将令牌嵌入到 Git URL 中，这会带来凭据泄露风险——在安装前请确认来源并评估令牌暴露风险。

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774382482258,
        "_id": "k9702r8vva5yxhdbdd58saxmks83hvhz",
        "changelog": "- Initial release providing integration with 阿里云云效 Codeup for project, branch, and commit queries.\n- Supports querying project branches, project information, commit logs, and branch activity.\n- Access secured via personal access token configured in environment variables.\n- Provides both Git clone and HTTP API usage methods, with sample commands.\n- Includes a Python CLI script (codeup_cli.py) for branch listing and information extraction.\n- Emphasizes safe token handling and temporary resource cleanup.",
        "changelogSource": "auto",
        "createdAt": 1774382482258,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s172f8k90f29ps4shmj6e9s99x83hshd",
        "displayName": "alexmayanjun-collab",
        "handle": "alexmayanjun-collab",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/247089206?v=4",
        "kind": "user",
        "linkedUserId": "kn7dh035v5a2ggap0mvc2x96ss82jwhq"
    },
    "ownerHandle": "alexmayanjun-collab",
    "skill": {
        "_creationTime": 1774382482258,
        "_id": "kd788rtq1p1zs47khqq1kn2hq983gccx",
        "badges": [],
        "createdAt": 1774382482258,
        "displayName": "Aliyun Codeup",
        "latestVersionId": "k9702r8vva5yxhdbdd58saxmks83hvhz",
        "ownerPublisherId": "s172f8k90f29ps4shmj6e9s99x83hshd",
        "ownerUserId": "kn7dh035v5a2ggap0mvc2x96ss82jwhq",
        "slug": "aliyun-codeup",
        "stats": {
            "comments": 0,
            "downloads": 12,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "阿里云云效 Codeup 代码仓库管理 - 查询项目、分支、提交记录等",
        "tags": {
            "latest": "k9702r8vva5yxhdbdd58saxmks83hvhz"
        },
        "updatedAt": 1774384006992
    }
}